CVE-2026-42807: Heap-based Buffer Overflow

A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINESSDK versions 2.10 through 2.12.2 allows attackers to cause a denial of service process crash or potentially execute arbitrary code. The bridge decoder bridgedecoder.c trusts the packet length fiel...

CVE-2026-88289: Stack-based Buffer Overflow

GeoVision GV-LPC2211 V1.14 260903 fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handlers, allowing an unauthenticated remote attacker to crash the VLSVR service...

CVE-2026-15419: Stack-based Buffer Overflow

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges...

Outbound Public IP Addresses Used by Veeam Data Cloud

Update: 2026-10-19 We're delaying the Veeam Data Cloud outbound public IP address change to allow customers more time to update their configuration without losing connectivity. The new IP range will become active on 2026-11-06, instead of 2026-10-12. The legacy IP range will be retired on...

Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

hugo: Hugo: Arbitrary file read/write via unrestricted file system access in Node-based asset pipelines

A flaw was found in Hugo. When building a Hugo site that uses Node-based asset pipelines such as PostCSS, Babel, or TailwindCSS, Hugo invoked the configured Node tools without restrictions on file system access. This could allow code running through these tools to read or write files outside the...

Exploit for SQL Injection in Wpfastestcache Wp_Fastest_Cache

CVE-2023-6063 — WP Fastest Cache SQL Injection PoC !Python...

CVE-2026-73786 Unauthenticated Network-Based Denial of Service in CPPM systems

A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service DoS attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server...

CVE-2026-73786

CVE-2026-73786 is an unauthenticated Denial-of-Service vulnerability in the web-based management interface of HPE CPPM (Change and Patch Management). A remote attacker with network access can exploit the flaw without credentials to cause instability and degraded performance on the CPPM server. Th...

DRUPAL-CONTRIB-2026-138

This module enables you to add key-based authentication on a per-user basis. The module doesn't cache per user, potentially allowing an attacker to view another user's authentication keys, if the attacker has the same permissions. This vulnerability is mitigated by the fact that the site must hav...

Heap-based Buffer Overflow

Overview Microsoft.DiaSymReader.Native is a Native implementation of PDB file reader and writer. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the processing of PDB files. An attacker can perform an out-of-bounds write and cause unintended behavior by supplying...

Vulnerabilities in Adobe Experience Manager

Adobe has identified several vulnerabilities in Adobe Experience Manager. Adobe Experience Manager contains several Cross-Site Scripting XSS vulnerabilities, including DOM-based and stored XSS vulnerabilities. These vulnerabilities allow attackers to inject and execute malicious JavaScript code...

CVE-2026-85103

Check Point Quantum Security Management and Quantum Security Gateway are affected by a heap-based buffer overflow in the VPN certificate ASN.1 decoding process. An unauthenticated remote attacker may exploit this to achieve arbitrary code execution , yielding a CVSS 3.1 score of 9.8 (Critical) wi...

RLSA-2026:64799 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

RLSA-2026:64800 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-25249link is external Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability CVE-2026-19490link is external Citrix NetScaler Authentication...

CVE-2025-3271

CVE-2025-3271 is attributed in the initial record to a DOM-based XSS in OpenText Documentum Webtop versions prior to 16.7.1 , rated CVSS 4.0 4.8 (MEDIUM) requiring low privileges and active user interaction with low impact on confidentiality and integrity. A connected PT Security entry (PT-2025-2...

CVE-2025-3271 DOM-based XSS vulnerability in OpenText™ Documentum Webtop

Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...

CVE-2025-3271 DOM-based XSS vulnerability in OpenText™ Documentum Webtop

Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...

CVE-2026-19778

The WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin for WordPress is vulnerable to time-based SQL Injection via the 'feed' parameter in all versions up to, and including, 2.23.7 due to insufficient escaping on the user supplied parameter and lack of...